CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- code-projects eblog sitecode-projects eBlog Site File Upload save-slider.php unrestricted upload5.3 Medium
- zlt2000 microservices-platformzlt2000 microservices-platform FileController.java upload unrestricted upload5.3 Medium
- oitcode samariumoitcode samarium Create Product product unrestricted upload6.9 Medium
- qiyuesuo eelectronic signature platform, electronic signature +1 moreQiyuesuo Eelectronic Signature Platform Scheduled Task upload execute unrestricted upload5.3 Medium
- linlinjava litemalllinlinjava litemall upload unrestricted upload5.3 Medium
- xodaXODA 0.4.5 Arbitrary PHP File Upload9.3 Critical
- wpo foundation webpagetestWebPageTest Arbitrary PHP File Upload RCE9.3 Critical
- sflog! cmsSflog! CMS 1.0 Arbitrary File Upload RCE8.7 High
- projectpierProject Pier <= 0.8.8 Arbitrary File Upload RCE9.3 Critical
- mobilecartlyMobileCartly 1.0 savepage.php Arbitrary File Creation10.0 Critical
- egalleryEGallery 1.2 Arbitrary PHP File Upload9.3 Critical
- cuteflow.org cuteflowCuteFlow <= 2.11.2 Arbitrary File Upload RCE9.3 Critical
- agora foundation agoraIn Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to...6.4 Medium
- sato corporation cl4/6nx plus, cl4/6nx-j plus (japan model) +1 moreCL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow...9.3 Critical
- vedo suite project suiteAn unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote...8.2 High
- getgrav gravA Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to...8.1 High
- asset-manager wordpress pluginWordPress Plugin WP-Property <= 1.35.0 PHP File Upload9.3 Critical
- jkriddle asset-managerWordPress Plugin Asset-Manager <= 2.0 PHP File Upload10.0 Critical
- kordil edmsKordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload10.0 Critical
- glossword team glosswordGlossword 1.8.8 - 1.8.12 Arbitrary File Upload RCE9.4 Critical
- freefloat ftp serverFreeFloat FTP Server Arbitrary File Upload9.3 Critical
- dell/quest kace k1000 systems management applianceDell/Quest KACE K1000 Unauthenticated File Upload RCE9.3 Critical
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- No product listedFile upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0,...6.5 Medium
- exrick xbootExrick xboot UploadController.java upload unrestricted upload5.3 Medium
- librettocmsLibrettoCMS File Manager Arbitrary File Upload9.3 Critical
- openplc v3 v3, thiagoralves openplc v3 +1 more/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload...6.4 Medium
- zkea zkeacmsAn arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code...9.8 Critical
- anisha kitchen treasurecode-projects Kitchen Treasure userregistration.php unrestricted upload5.3 Medium
- open-emr openemrOpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE8.7 High
- miniwebMiniWeb <= Build 300 Arbitrary File Upload9.3 Critical
- havalite cms cmsHavalite CMS Arbitary File Upload RCE9.3 Critical
- berqwp – automated all-in-one page speed optimization for core web vitals, cache, cdn, images, css, and javascriptBerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload8.1 High
- emlogEmlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog...7.2 High
- simple e-document e-documentSimple E-Document Arbitrary File Upload RCE9.2 Critical
- kaseya kserverKaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE9.3 Critical
- tufat flashchatFlashChat Arbitrary File Upload RCE9.3 Critical
- clip-bucket clipbucketClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE10.0 Critical
- astium voip pbxAstium VOIP PBX <= 2.1 SQL Injection File Upload RCE9.5 Critical
- campcodes online hotel reservation systemCampcodes Online Hotel Reservation System edit_room.php unrestricted upload5.1 Medium
- alfasado powercmsMultiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product...5.1 Medium
- jordy meow ai engineAI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- openviglet shioopenviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload5.3 Medium
- ventem e-schoolVentem｜e-School - Arbitrary File Upload8.7 High
- xorux lpar2rrdKL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal8.8 High
- 299ko cms299Ko CMS File Management view unrestricted upload5.1 Medium
- code-projects online ordering systemcode-projects Online Ordering System product.php unrestricted upload5.3 Medium
- code-projects exam form submissioncode-projects Exam Form Submission register.php unrestricted upload6.9 Medium
- code-projects voting systemcode-projects Voting System candidates_add.php unrestricted upload5.3 Medium
- Show moreLoading…